Out-of-bounds

A vulnerability was found in PHPGurukul Online Notes Sharing System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /user/add-notes.php. The manipulation leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclose...

Backup Migration 1.0.8 - 1.3.9 - Remote File Inclusion via content-dir

Description The Backup Migration plugin for WordPress is vulnerable to Remote File Inclusion in versions 1.0.8 to 1.3.9 via the 'content-dir' HTTP header. This makes it possible for unauthenticated attackers to include remote files on the server, resulting in code execution. NOTE: Successful...

CVE-2023-7026

A vulnerability was found in Lightxun IPTV Gateway up to 20231208. It has been rated as problematic. This issue affects some unknown processing of the file /ZHGXTV/index.php/admin/index/webuploadtemplate.html. The manipulation of the argument file leads to unrestricted upload. The attack may be...

Mlflow Code Issue Vulnerability

Mlflow is an open source platform for machine learning lifecycle. A code issue vulnerability exists in Mlflow. An attacker could exploit this vulnerability to write arbitrary files to an arbitrary location on a remote file system in a server process environment...

Jira Server/Data Center Limited Remote File Read (CVE-2021-26086)

Binary data jiracve-2021-26086.nbin...

PT-2023-30804 · Softnext · Softnext Mail Sqr Expert

Name of the Vulnerable Software and Affected Versions: Softnext Mail SQR Expert affected versions not specified Description: The issue is related to a path traversal vulnerability within a specific URL parameter. This allows an unauthenticated remote attacker to bypass authentication and download...

GHSA-7X2G-4JVC-4X6P Directory Traversal in JFinalCMS

JFinalCMS 5.0.0 could allow a remote attacker to read files via ../ Directory Traversal in the /common/down/file fileKey parameter...

Remote file inclusion

LOYTEC electronics GmbH LINX-212 firmware 6.2.4 and LINX-151 Firmware 7.2.4 are vulnerable to Incorrect Access Control via registry.xml file. This vulnerability allows remote attackers to disclose sensitive information on LINX configuration...

CVE-2023-6343

The CVE describes a vulnerability in Tyler Technologies Court Case Management Plus related to the Aquaforest TIFF Server used for handling TIFF files. Affected component: Aquaforest TIFF Server (integrated via Tyler’s court management solution). Vulnerability occurs in TIFF Server features access...

Systematica Radius Security Vulnerability

Systematica Radius is an application from Systematica, Inc. A security vulnerability exists in Systematica Radius v.3.9.256.777 and earlier versions, which stems from an absolute path traversal vulnerability that allows remote attackers to read arbitrary files...

python-werkzeug: high resource consumption leading to denial of service

A resource consumption flaw was found in python-werkzeug. If a specially crafted file is uploaded by a remote attacker, it may cause a denial of service...

VulnCheck KEV: CVE-2021-33564

An argument injection vulnerability in the Dragonfly gem before 1.4.0 for Ruby allows remote attackers to read and write to arbitrary files via a crafted URL when the verifyurl option is disabled. This may lead to code execution. The problem occurs because the generate and process features...

VulnCheck KEV: CVE-2017-15363

Directory traversal vulnerability in public/examples/resources/getsource.php in Luracast Restler through 3.0.0, as used in the restler extension before 1.7.1 for TYPO3, allows remote attackers to read arbitrary files via the file parameter...

CVE-2023-6252

Path traversal vulnerability in Chalemelon Power framework, affecting the getImage parameter. This vulnerability could allow a remote user to read files located on the server and gain access to sensitive information such as configuration files...

The vulnerability of Fortinet FortiWLM, a centralized management system for WLAN access points and LAN switches, arises from errors in processing the relative path to the catalog. This allows attackers to read arbitrary files.

The vulnerability of Fortinet FortiWLM, a centralized management system for WLAN access points and LAN switches, is related to errors in processing the relative path to the catalog. Exploiting this vulnerability allows an attacker, operating remotely, to read arbitrary files using specially creat...

PT-2023-26658 · Unknown · Opensis Classic

Name of the Vulnerable Software and Affected Versions: openSIS Classic version 9.0 Description: The issue allows remote attackers to read arbitrary files via a directory traversal vulnerability in the filename parameter of the "DownloadWindow.php" endpoint. Recommendations: For version 9.0,...

The vulnerability of the Apache Airflow network software, related to incorrect authorization, allows a hacker to modify any files they desire.

The vulnerability of the Apache Airflow network software is related to improper authorization. Exploiting this vulnerability allows a malicious actor to remotely modify arbitrary files...

ModelDB Security Vulnerabilities

ModelDB is an open source system for machine learning model version control, metadata, and experiment management from VertaAI. ModelDB has a security vulnerability that stems from a remote file inclusion LFI vulnerability in the artifactpath URL parameter. An attacker can exploit this vulnerabili...

Ray Security breach

Ray is a unified framework for scaling AI and Python applications open-sourced by ray-project. Ray has a security vulnerability that stems from a remote file inclusion LFI vulnerability in the /static/ directory. An attacker can exploit this vulnerability to read any file on the server...

PT-2023-6873 · Comos · Comos

Name of the Vulnerable Software and Affected Versions: COMOS All versions Description: The issue is related to the implementation of the Server Message Block SMB network protocol in COMOS software, which is used for designing, operating, and maintaining technological installations. It is associat...